JE
Product
Jetpack
18
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 14Low 0
Watch
Add Jetpack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-47788 | 8.8 | Jun 19 | Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7 Affected: before 12.7 |
| CVE-2023-2996 | 8.8 | Jun 27 | The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary… Affected: before 12.1.1 |
| CVE-2023-54332 | 6.1 | Jan 13 | Jetpack 11.4 - Cross Site Scripting (XSS) Affected: 11.4 |
| CVE-2024-10858 | 6.1 | Dec 25 | Jetpack 13.0-14.0 - Unauthenticated DOM-XSS Affected: before 14.1 |
| CVE-2015-9359 | 6.1 | Aug 28 | The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg() Affected: before 3.4.3 |
| CVE-2016-10706 | 6.1 | Jan 12 | The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link Affected: before 4.0.3 |
| CVE-2016-10705 | 6.1 | Jan 12 | The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module Affected: through 4.0.3 |
| CVE-2024-10076 | 5.9 | May 15 | Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS Affected: before 13.8 |
| CVE-2024-10075 | 5.6 | May 15 | Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution Affected: before 13.8 |
| CVE-2026-106601 | 5.4 | Oct 9 | WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability Affected: through 16.2 |
| CVE-2024-4392 | 5.4 | May 14 | The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpvideo shortcode in all versions up to, and… Affected: before 13.4 |
| CVE-2023-47774 | 5.4 | Apr 24 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue affects Jetpack: from n/a before 12.7 Affected: before 12.7 |
| CVE-2023-45050 | 5.4 | Nov 30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Jetpack – WP Security, Backup, Speed, & Growth allows Stored… Affected: through 12.8-a.1 |
| CVE-2021-24374 | 5.3 | Jun 21 | The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images Affected: before 9.8 |
| CVE-2026-106602 | 4.8 | Oct 9 | WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability Affected: through 16.2 |
| CVE-2024-9926 | 4.3 | Nov 7 | The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data… Affected: 13.1 before 13.1.4; 13.2 before 13.2.3; 13.3 before 13.3.2; 13.4 before 13.4.4; 13.8 before 13.8.2; 13.0; +4 more |
| CVE-2014-0173 | – | Apr 22 | The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before… Affected: 1.9; 1.9.1; 1.9.2; 2.0; 2.0.1; 2.0.2; +29 more |
| CVE-2011-4673 | – | Dec 2 | SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter Affected: All versions, or not specified |
Showing 18